C:\DLL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3cad07aa3e1fcd6dbc273a546e622350_NeikiAnalytics.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
3cad07aa3e1fcd6dbc273a546e622350_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
3cad07aa3e1fcd6dbc273a546e622350_NeikiAnalytics
-
Size
17KB
-
MD5
3cad07aa3e1fcd6dbc273a546e622350
-
SHA1
4ab2237ff22fcd506c59d1395f0a3ef5d06d7b76
-
SHA256
5ca7b0f9a3f522f4e6085aefe58e9ae53455fefcbd63147ad1f2cab1151e895d
-
SHA512
dd0a1a020d006146b5949446152f3697b31fac67510dc2eb5e72ede294d464fd7d709d38dc335ee36254b8948e6f2abe71b7eb978b1c41b77ae86115264ab6f1
-
SSDEEP
384:09fw/Y9UjwlDzQnHyXl0Aadbs39QBX5s:ufw/Y98AzQnHyXlRadbs39QBX5s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cad07aa3e1fcd6dbc273a546e622350_NeikiAnalytics
Files
-
3cad07aa3e1fcd6dbc273a546e622350_NeikiAnalytics.dll windows:5 windows x86 arch:x86
04f3b1c7e4b32923650c696c56a48095
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
memset
??3@YAXPAX@Z
strrchr
??2@YAPAXI@Z
strcpy
strlen
shlwapi
SHDeleteKeyA
psapi
GetModuleFileNameExA
kernel32
WaitForSingleObject
OpenProcess
Sleep
CreateProcessA
lstrcmpiA
GetProcAddress
CopyFileA
DeviceIoControl
GetModuleFileNameA
CreateFileA
CloseHandle
ResumeThread
DeleteFileA
CreateThread
lstrcpyA
GetFileSize
lstrlenA
ReadFile
WinExec
LoadLibraryA
LoadLibraryExA
LocalFree
FreeLibrary
Process32First
WriteFile
MultiByteToWideChar
Process32Next
CreateToolhelp32Snapshot
ExitProcess
GetModuleHandleA
user32
OpenWindowStationA
SetProcessWindowStation
OpenDesktopA
wsprintfA
SetThreadDesktop
advapi32
OpenSCManagerA
StartServiceA
CreateServiceA
CloseServiceHandle
GetNamedSecurityInfoA
RegCloseKey
BuildExplicitAccessWithNameA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
SetNamedSecurityInfoA
OpenProcessToken
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ